Read the docs
Red Hat Security Advisory

RHSA-2013:0596

openstack-keystone security, bug fix, and enhancement update

Released 2013-03-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2013-01462 CVE-2013-1665 · GHSA-x64m-686f-fmm3

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack…

Priority LOW 30

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via an XML external entity…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04507 Published 2013-04-03 Partial fix · 1.3.6, 1.4.4 CWE-200
TI-2013-01461 CVE-2013-1664 · GHSA-qrh7-x6fp-c2mp

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack…

Priority LOW 30

The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote at…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04771 Published 2013-04-03 Partial fix · 1.3.6, 1.4.4 CWE-119
TI-2013-00213 CVE-2013-0282 · GHSA-8833-qrvm-wc3h

OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not…

Priority LOW 26

OpenStack Keystone Grizzly before 2013.1, Folsom 2012.1.3 and earlier, and Essex does not properly check if the (1) user, (2) tenant, or (3) domain is enabled when using EC2-style authentication, which allows context-dep…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01761 Published 2013-04-12 Fixed in 8.0.0a0 CWE-287